https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/pan-os-upgrade-downgrade-procedure/m-p/1219838#M2336 <P>I need to rebuild an HA peer for an existing NGFW in our Azure Production environment with minimal downtime. The existing NGFW was deployed as BYOL (Azure Source image plan = byol). The rebuilt HA Peer has been deployed as PayGo (Azure Source image plan = bundle1). The mismatched PAN-OS version is blocking HA peering and config sync.<BR /><BR /></P> <P>I need to UPGRADE the original NGFW to version 11.1.0 and DOWNGRADE the new HA Peer to version 11.1.0 to successfully enable HA Peering and config sync before rebuilding/redepolying NGFW #1 as PayGo.<BR /><BR /><A href="https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-the-vm-series-firewall-on-azure/configure-activepassive-ha-for-vm-series-firewall-on-azure" target="_blank">https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-the-vm-series-firewall-on-azure/configure-activepassive-ha-for-vm-series-firewall-on-azure</A><BR /><BR /></P> <P>NGFW #1 (Original)<BR />Model: PA-VM<BR />VM Mode: Microsoft Azure<BR />Software Version: 11.0.2<BR />Azure Source image plan: byol<BR />Azure OS: Linux (centos 8.3.2011)</P> <P>NGFW #2 (HA Peer)<BR />Model: PA-VM<BR />VM Mode: Microsoft Azure<BR />Software Version: 11.2.3-h3<BR />Azure Source image plan: bundle1<BR />Azure OS: Linux (redhat PanOS)</P> Sat, 08 Feb 2025 21:04:08 GMT CarlNeal 2025-02-08T21:04:08Z https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/pan-os-upgrade-downgrade-procedure/m-p/1219838#M2336 <P>I need to rebuild an HA peer for an existing NGFW in our Azure Production environment with minimal downtime. The existing NGFW was deployed as BYOL (Azure Source image plan = byol). The rebuilt HA Peer has been deployed as PayGo (Azure Source image plan = bundle1). The mismatched PAN-OS version is blocking HA peering and config sync.<BR /><BR /></P> <P>I need to UPGRADE the original NGFW to version 11.1.0 and DOWNGRADE the new HA Peer to version 11.1.0 to successfully enable HA Peering and config sync before rebuilding/redepolying NGFW #1 as PayGo.<BR /><BR /><A href="https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-the-vm-series-firewall-on-azure/configure-activepassive-ha-for-vm-series-firewall-on-azure" target="_blank">https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-the-vm-series-firewall-on-azure/configure-activepassive-ha-for-vm-series-firewall-on-azure</A><BR /><BR /></P> <P>NGFW #1 (Original)<BR />Model: PA-VM<BR />VM Mode: Microsoft Azure<BR />Software Version: 11.0.2<BR />Azure Source image plan: byol<BR />Azure OS: Linux (centos 8.3.2011)</P> <P>NGFW #2 (HA Peer)<BR />Model: PA-VM<BR />VM Mode: Microsoft Azure<BR />Software Version: 11.2.3-h3<BR />Azure Source image plan: bundle1<BR />Azure OS: Linux (redhat PanOS)</P> Sat, 08 Feb 2025 21:04:08 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/pan-os-upgrade-downgrade-procedure/m-p/1219838#M2336 CarlNeal 2025-02-08T21:04:08Z